b7ce679a8c2bf2b7ff5e72a4a8c43a1c_JaffaCakes118 | Triage

Sharing

General

Target

b7ce679a8c2bf2b7ff5e72a4a8c43a1c_JaffaCakes118
Size

202KB
MD5

b7ce679a8c2bf2b7ff5e72a4a8c43a1c
SHA1

4a525f70fd80a4fa658f642beaec2182396b3532
SHA256

113d9cbd3620521c66caf869c75b2b4c564f3e0b5e95c4c566637c8caa46a90f
SHA512

2a18a030eef059dfcc24da3ceabf29d10fcdd0b9c0f0b2895bba5d392f5fe53fea2e307bb41803437ff60b55881ad3671c09b5b29746ed8779352f18d1f8ee5d
SSDEEP

3072:jR284uRL41BGFZBNj0JPvhp9YvXvyULv8ClF2OeuNuwIRwS/hWDECfwSMW/7Rh5:fd4CB90JPppcqU4i2/uTTSJWQCIfmRz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7ce679a8c2bf2b7ff5e72a4a8c43a1c_JaffaCakes118

Files

b7ce679a8c2bf2b7ff5e72a4a8c43a1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0eedc7cba76ed38792bbedd0ccf174ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord667
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord570
ord100
ord616
ord617

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ